IT Systems Engineer

About Gallatin

At Gallatin, we are rebuilding logistics infrastructure for the national security missions of the United States and allied partners. We build AI systems that determine how logistics decisions are made — not just how they're executed. From factory to foxhole, we operate at the layer where data becomes decisions, and decisions make the advantage.

We’re looking for an IT Systems Engineer to help build and scale the systems Gallatin employees rely on every day.

As the second dedicated IT hire, you will work across endpoint engineering, identity and access management, SaaS administration, security and compliance, office infrastructure, automation, and employee support. You will own systems end to end and help define how IT operates as Gallatin grows.

This is a broad systems role with a strong endpoint focus. You should be able to operate across macOS, Windows, mobile, identity, and cloud applications, with hands‑on experience in Jamf Pro, Microsoft Intune, Google Workspace, and Okta. Experience managing Windows devices and access controls in Microsoft 365 GCC High is especially important.

The level is flexible. We care more about technical judgment, ownership, and the ability to build reliable systems than a specific title or number of years.

• Own the lifecycle of Gallatin’s macOS, Windows, and mobile environments, from enrollment through deprovisioning.

• Build and maintain Jamf Pro policies, profiles, packages, scripts, smart groups, compliance controls, and Self Service workflows.

• Implement and operate Windows device management through Microsoft Intune in GCC High.

• Design Google Workspace mobile application management controls for employee‑owned devices.

• Automate provisioning, application deployment, patching, security baselines, inventory, and compliance reporting.

• Own identity lifecycle workflows across Okta, Google Workspace, Microsoft 365 GCC High, Slack, and other business‑critical platforms.

• Automate onboarding, role changes, access reviews, and offboarding using APIs, scripts, and workflow tools.

• Design access controls around least privilege, device trust, role‑based access, and data sensitivity.

• Administer and integrate Gallatin’s core productivity, collaboration, engineering, and business applications.

• Establish guardrails for enterprise AI tools and AI‑enabled SaaS applications, including authentication, provisioning, data handling, retention, integrations, and audit logging.

• Partner with Security and Engineering to protect sensitive company and government data while enabling employees to use approved AI tools productively.

• Replace brittle manual processes with systems that are repeatable, observable, and difficult to misuse.

• Translate CMMC, NIST 800-171, and other requirements into technical controls that work in practice.

• Build reliable device compliance, access enforcement, evidence collection, and audit‑readiness workflows.

• Troubleshoot complex issues across endpoints, identity, SaaS applications, networking, authentication, and operating systems.

• Provide direct employee support while eliminating recurring failure modes through engineering and automation.

• Create clear documentation, runbooks, standards, and employee‑facing guidance.

• Take ownership of unfamiliar problems and drive them through resolution.

• Experience as an IT Systems Engineer, Endpoint Engineer, Systems Administrator, or in a similarly broad technical role.

• Strong hands‑on Okta administration, including SSO, MFA, application integrations, lifecycle management, and access policies.

• Strong hands‑on management of macOS, Windows, and mobile devices using Jamf Pro, Microsoft Intune, and Google Workspace.

• Experience operating Microsoft 365 and Intune in GCC High or another regulated Microsoft cloud environment.

• Ability to independently design, implement, operate, and improve production IT systems.

• Strong troubleshooting skills across operating systems, networks, identity platforms, and cloud applications.

• Automation skills using Bash, Power Shell, Python, APIs, or workflow…